Abdullah Bin Zarshaid Personal portfolio · abdullahzarshaid.com
Evidence portfolio
Work you can inspect. Limits you can see.
Six public artifacts connect code, teaching, governance and research. Every card separates an inspectable fact from the conclusion it cannot support.
PUBLIC ARTIFACTS6
Source links are provided for every item.
CLAIM MODELFact → limit
No employer, customer or private-company evidence is included.
SOURCE REVIEW17 October 2026
Repository state may change after this review date.
EVIDENCE CATALOGUE
Choose a working surface.
6 public artifacts shown
01 / Windows / Active Directory / wireless posturePublic repository
PostureKit
An evidence-led posture assessment toolkit with read-only collection, hashed evidence batches and transparent analysis rules.
45 documented evidence sources and 45 analysis rules
225 synthetic Python tests and 97 PowerShell fixture checks
Validation documented across a six-machine virtual lab
What this does not establish
It identifies and evidences selected configuration or patch weaknesses. It does not exploit systems, discover hosts or independently prove exploitability or complete coverage.
An offline SQLite-backed checker for evidence-package integrity, CVSS 3.1, HTTP capture structure, hostname scope and selected secret patterns.
Uses SHA-256 integrity references
Runs locally with the Python standard library
Makes no network requests during its documented checks
What this does not establish
A READY result means only that configured checks passed. It is not proof of a vulnerability, evidence authenticity, authorization, complete redaction or analyst approval.
Nineteen topic guides developed from a university course, with credited student examples and defensive or detection perspectives alongside practical exercises.
Topics run from reconnaissance and enumeration through web, API, wireless, mobile, IoT/OT, cloud and cryptography
Guides distinguish authorized laboratory work from activity against real targets
Exercises belong in isolated, explicitly authorized environments. The collection does not confer a qualification or establish suitability for activity outside its stated lab boundaries.
Six original spreadsheet trackers for risk, evidence, remediation, vendor review, policy registers and assessment scope.
Distributed as editable XLSX working files
Each tracker includes prepared rows, filters and controlled-choice fields
No macros, account sign-up or customer records are included
What this does not establish
These are working starters, not complete framework checklists, legal advice, audit workpapers or certification tools. They must be adapted and reviewed for the actual scope.
